problem with hotspot personal

[mohamed_ghaith]

hello guys :

I have a problem with my work, anyone can have a hotspot personal on their device can distribute internet , and this is without fortiget knowing what is happening ,As well as can not control them . Please, I want an answer to this problem.

[Toshi_Esumi]

I assume it's a rogue SSID/AP from one of your neighbors. If you have a decent WiFi AP of your own, it might support WIPS feature, like FortiAP, that would disconnect clients' association to the rogue SSID/AP. 

Note: Depending on your country/region, this feature may be prohibited by law.

[Leen]

you can solve this two ways:

1) disable by using group policy the ability to enable tethering (hotspot), either per computer or in AD domain.

3) enable captive portal; this will enforce login, no login = no internet.